VLAN/QOS/Management access help

Hi people,

First time using Mikrotik, so far very impressed with the product (especially considering the cost) - good work!

I have a OS level 4 and a RB564 board, running 45VLANS (on Ether1). Everything is working fine and functional however I can’t quite figure out how to do the following:

  1. I need to block VLAN routing, so for example people in VLAN16 can’t access VLAN17 (and visa versa) - I only want them to be able to browse the internet. How do I block this?

  2. I have one VLAN which is just VOIP traffic (VLAN2), I want to give priority to this VLAN over any other - all of the examples I have seen are to limited bandwidth, I just want to simply prioritize this VLAN

  3. I can’t seem to access the router from the internet, ether2 has a static public IP and SSH access is showing to allow access from 0.0.0.0/0 but when I try to putty to that IP I can’t connect, same thing with telnet. Do I need additional configuration to be able to do this?

I would really appreciate any advice

Thanks

Firewall - FORWARD, 3 rules:
in-interface=internet action=accept
out-interface=internet action=accept
action=reject/drop